lams-github

Clone Tools

Stats

Commits this week: 0
Total Committers: 50
Last Commit:
Commits this week: 0

Lines of code count not available

Commit Activity

Commits By Day In Week
52 week commits volume
Commits By Day In Week
Commits by day
Commits By Day In Week
Commits by hour
Commits By Hour In Day
Commit calendar
 

Most active committers (90 days)

loading
loading
  • last updated a few seconds ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Friday 03 Jan 2020
1:40 pm

Marcin Cieslak

LDEV-4743 Squash core patches updating to version 3.0

Options
    • -22
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040007.sql
    • -18
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040008.sql
    • -74
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040009.sql
    • -10
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040010.sql
    • -10
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040011.sql
    • -10
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040012.sql
    • -25
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040013.sql
    • -30
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040014.sql
    • -12
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040015.sql
    • -12
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040016.sql
    • -13
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040017.sql
    • -12
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040018.sql
    • -14
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040019.sql
    • -19
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040020.sql
    • -38
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040021.sql
  16. … 64 more files in changeset.
1:20 pm

Marcin Cieslak

LDEV-4743 Squash patches updating to version 2.4

Options
    • -43
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040000.sql
    • -14
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040002.sql
    • -18
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040004.sql
    • -128
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040006.sql
    • -0
    • +320
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02040006_updateTo24.sql
1:19 pm

Marcin Cieslak

LDEV-4743 Rename patch to keep naming convention

Options
    • -12
    • +0
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02030200_update232_version.sql
    • -0
    • +12
    /lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch02030200_updateTo232.sql
2:22 am

Ernie Ghiglione

LDEV-4932 Add CSRF to Vote and share resources authoring

Options
    • -0
    • +5
    /lams_central/conf/security/Owasp.CsrfGuard.properties
    • -3
    • +3
    /lams_tool_larsrc/src/java/org/lamsfoundation/lams/tool/rsrc/web/controller/AuthoringController.java
    • -2
    • +3
    /lams_tool_larsrc/web/pages/authoring/basic.jsp
    • -2
    • +2
    /lams_tool_larsrc/web/pages/authoring/parts/addfile.jsp
    • -2
    • +2
    /lams_tool_larsrc/web/pages/authoring/parts/addlearningobject.jsp
    • -2
    • +2
    /lams_tool_larsrc/web/pages/authoring/parts/addurl.jsp
    • -3
    • +3
    /lams_tool_larsrc/web/pages/authoring/parts/addwebsite.jsp
    • -0
    • +1
    /lams_tool_vote/web/authoring/newNominationBox.jsp
Thursday 02 Jan 2020
10:18 pm

Ernie Ghiglione

LDEV-4745 Adding missing labels to QB

Options
    • -2
    • +70
    /lams_central/conf/language/lams/ApplicationResources.properties
    • -2
    • +70
    /lams_central/conf/language/lams/ApplicationResources_en_AU.properties
9:12 pm

Ernie Ghiglione

LDEV-4932 Add CSRF to OutcomeAuthor tag

Options
    • -2
    • +3
    /lams_admin/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_central/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_gradebook/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_learning/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_monitoring/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_tool_assessment/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_tool_chat/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_tool_daco/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_tool_doku/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_tool_gmap/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_tool_images/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_tool_imscc/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_tool_lamc/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_tool_laqa/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +3
    /lams_tool_larsrc/web/WEB-INF/tags/OutcomeAuthor.tag
  16. … 16 more files in changeset.
9:00 pm

Ernie Ghiglione

LDEV-4932 removing multipart encoding

There are plenty of form we set the multipart encoding for uploading files, but no files are uploaded. This has implications for CSRF tokens. So we remove the enctype="multipart/form-data" for all the authoring forms that aren't needed.

Options
    • -1
    • +1
    /lams_admin/web/loginmaintain.jsp
    • -1
    • +1
    /lams_tool_assessment/web/pages/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_daco/web/pages/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_doku/web/pages/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_images/web/pages/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_imscc/web/pages/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_mindmap/web/pages/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_nb/web/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_pixlr/web/pages/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_preview/web/pages/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_sbmt/web/authoring/authoring.jsp
    • -2
    • +3
    /lams_tool_sbmt/web/monitoring/mark/updatemark.jsp
    • -1
    • +1
    /lams_tool_spreadsheet/web/pages/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_wiki/web/pages/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_zoom/web/pages/authoring/authoring.jsp
8:39 pm

Ernie Ghiglione

LDEV-4932: Adding CSRF to forum and central

CSRF additions to:

- Forum authoring methods

- Adding outcomes to activities in tools (changes to tag and central methods)

Options
    • -0
    • +6
    /lams_central/conf/security/Owasp.CsrfGuard.properties
    • -1
    • +1
    /lams_central/src/java/org/lamsfoundation/lams/web/outcome/OutcomeController.java
    • -1
    • +1
    /lams_central/web/outcome/outcomeManage.jsp
    • -1
    • +1
    /lams_tool_chat/web/pages/authoring/authoring.jsp
    • -5
    • +5
    /lams_tool_forum/src/java/org/lamsfoundation/lams/tool/forum/web/controller/AuthoringController.java
    • -2
    • +3
    /lams_tool_forum/web/WEB-INF/tags/OutcomeAuthor.tag
    • -2
    • +6
    /lams_tool_forum/web/includes/javascript/message.js
    • -1
    • +3
    /lams_tool_forum/web/jsps/authoring/authoring.jsp
    • -2
    • +2
    /lams_tool_forum/web/jsps/authoring/basic.jsp
    • -1
    • +2
    /lams_tool_forum/web/jsps/authoring/message/create.jsp
    • -1
    • +2
    /lams_tool_forum/web/jsps/authoring/message/edit.jsp
11:54 am

Ernie Ghiglione

LDEV-4932 Adding CSRF to central

Adding CSRF to:

- Lesson dependencies (add/remove)

- Set dates to finish lesson

Options
    • -0
    • +3
    /lams_central/conf/security/Owasp.CsrfGuard.properties
    • -4
    • +5
    /lams_central/src/java/org/lamsfoundation/lams/web/LessonConditionsController.java
    • -9
    • +13
    /lams_central/web/indexLessonConditions.jsp
8:49 am

Ernie Ghiglione

LDEV-4932 Adding CSRF to central and monitoring

Adding CSRF to:

- Grades on completion

- Enable/disable presence and IM

- Send emails

- Update users into lessons

- Send email notifications

- Delete email notifications

Options
    • -0
    • +8
    /lams_central/conf/security/Owasp.CsrfGuard.properties
    • -2
    • +3
    /lams_central/src/java/org/lamsfoundation/lams/web/EmailUserController.java
    • -1
    • +3
    /lams_central/web/emailuser.jsp
    • -2
    • +3
    /lams_monitoring/src/java/org/lamsfoundation/lams/monitoring/web/EmailNotificationsController.java
    • -3
    • +4
    /lams_monitoring/src/java/org/lamsfoundation/lams/monitoring/web/EmailProgressController.java
    • -5
    • +5
    /lams_monitoring/src/java/org/lamsfoundation/lams/monitoring/web/MonitoringController.java
    • -1
    • +1
    /lams_monitoring/web/emailnotifications/courseNotifications.jsp
    • -1
    • +1
    /lams_monitoring/web/emailnotifications/lessonNotifications.jsp
    • -2
    • +2
    /lams_monitoring/web/emailnotifications/scheduledEmailList.jsp
    • -28
    • +37
    /lams_monitoring/web/includes/javascript/monitorLesson.js
    • -0
    • +3
    /lams_monitoring/web/monitor.jsp
Wednesday 01 Jan 2020
7:43 am

Ernie Ghiglione

LDEV-4932 Passing CSRF token as a post rather than get

Options
    • -1
    • +1
    /lams_admin/web/config/editconfig.jsp
    • -1
    • +1
    /lams_admin/web/integration/ltiConsumer.jsp
    • -1
    • +1
    /lams_admin/web/integration/servermaintain.jsp
    • -1
    • +1
    /lams_admin/web/loginmaintain.jsp
    • -1
    • +1
    /lams_admin/web/policies/editPolicy.jsp
    • -1
    • +1
    /lams_admin/web/signupmanagement/add.jsp
    • -1
    • +1
    /lams_admin/web/themeManagement.jsp
    • -1
    • +1
    /lams_admin/web/timezoneManagement.jsp
    • -2
    • +2
    /lams_central/web/outcome/outcomeEdit.jsp
    • -3
    • +3
    /lams_central/web/profile/editprofile.jsp
    • -2
    • +2
    /lams_tool_assessment/web/pages/authoring/authoring.jsp
    • -2
    • +2
    /lams_tool_chat/web/pages/authoring/authoring.jsp
    • -3
    • +3
    /lams_tool_daco/web/pages/authoring/authoring.jsp
    • -2
    • +2
    /lams_tool_doku/web/pages/authoring/authoring.jsp
    • -2
    • +2
    /lams_tool_forum/web/jsps/authoring/authoring.jsp
  16. … 27 more files in changeset.
7:12 am

Ernie Ghiglione

LDEV-4932 fix checkbox toggle issue

Options
    • -1
    • +1
    /lams_admin/web/userorgrole.jsp
6:36 am

Ernie Ghiglione

LDEV-4932 Adding CSRF to Admin

Adding it to:

- User roles

- Create course

- Clone lessons

- assign roles in courses

- global roles

- change password for course

- change user pass

- delete all lessons

Options
    • -1
    • +2
    /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/OrgSaveController.java
    • -1
    • +1
    /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/OrganisationController.java
    • -2
    • +2
    /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/UserController.java
    • -1
    • +2
    /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/UserOrgSaveController.java
    • -1
    • +1
    /lams_admin/web/config/editconfig.jsp
    • -1
    • +1
    /lams_admin/web/integration/ltiConsumer.jsp
    • -1
    • +0
    /lams_admin/web/integration/serverlist.jsp
    • -1
    • +1
    /lams_admin/web/integration/servermaintain.jsp
    • -1
    • +1
    /lams_admin/web/loginmaintain.jsp
    • -0
    • +1
    /lams_admin/web/orgPasswordChange.jsp
    • -0
    • +1
    /lams_admin/web/organisation/cloneStart.jsp
    • -0
    • +1
    /lams_admin/web/organisation/createOrEdit.jsp
    • -1
    • +2
    /lams_admin/web/organisation/deleteAllLessons.jsp
    • -4
    • +4
    /lams_admin/web/organisation/list.jsp
    • -1
    • +1
    /lams_admin/web/policies/editPolicy.jsp
  16. … 9 more files in changeset.
2:35 am

Andrey Balan

LDEV-4932 Add CSRF to monitor and central

* Add CSRF protection to:

- Change lesson status (incl. remove)

- Remove lesson using main.jsp button

- Rename lesson

* Start using /common/taglibs.jsp in lams_central

Options
    • -0
    • +7
    /lams_central/conf/security/Owasp.CsrfGuard.properties
    • -5
    • +2
    /lams_central/web/addLesson.jsp
    • -6
    • +1
    /lams_central/web/admin.jsp
    • -7
    • +1
    /lams_central/web/authoringConfirm.jsp
    • -0
    • +8
    /lams_central/web/common/taglibs.jsp
    • -2
    • +1
    /lams_central/web/dialogCloser.jsp
    • -6
    • +1
    /lams_central/web/editLessonIntro.jsp
    • -5
    • +2
    /lams_central/web/error.jsp
    • -7
    • +2
    /lams_central/web/errorContent.jsp
    • -5
    • +1
    /lams_central/web/favoriteOrganisations.jsp
    • -7
    • +7
    /lams_central/web/includes/javascript/main.js
    • -5
    • +1
    /lams_central/web/index.jsp
    • -6
    • +4
    /lams_central/web/main.jsp
    • -8
    • +2
    /lams_central/web/outcome/outcomeEdit.jsp
    • -8
    • +3
    /lams_central/web/outcome/outcomeManage.jsp
  16. … 9 more files in changeset.
Tuesday 31 Dec 2019
11:25 am

Ernie Ghiglione

LDEV-4932 Add CSRF to central (outcomes)

Adding CSRF protection to:

- Delete outcomes

Options
    • -0
    • +1
    /lams_central/conf/security/Owasp.CsrfGuard.properties
    • -2
    • +2
    /lams_central/src/java/org/lamsfoundation/lams/web/outcome/OutcomeController.java
    • -2
    • +3
    /lams_central/web/includes/javascript/outcome.js
    • -4
    • +3
    /lams_central/web/outcome/outcomeManage.jsp
10:24 am

Ernie Ghiglione

LDEV-4932 Add CSRF for admin

- Adding CSRF to delete preview lessons

Options
    • -1
    • +1
    /lams_admin/web/cleanupPreviewLessons.jsp
    • -0
    • +1
    /lams_central/conf/security/Owasp.CsrfGuard.properties
10:06 am

Ernie Ghiglione

LDEV-4932 Adding CSRF protection to admin

- Adding user add/edit/remove/disable

Options
    • -7
    • +8
    /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/UserController.java
    • -1
    • +1
    /lams_admin/web/disabledusers.jsp
    • -8
    • +5
    /lams_admin/web/remove.jsp
    • -3
    • +3
    /lams_admin/web/user.jsp
    • -7
    • +3
    /lams_admin/web/usersearchlist.jsp
    • -0
    • +5
    /lams_central/conf/security/Owasp.CsrfGuard.properties
6:51 am

Andrey Balan

LDEV-4932 Secure gradebook calls with CSRF Guard

* Secure the following gradebook calls in particular:

- Release marks

- Any change in marks

- Export

* Add taglibs.jsp to gradebook project

Options
    • -0
    • +70
    /lams_gradebook/web/WEB-INF/tlds/security/csrfguard.tld
6:51 am

Andrey Balan

LDEV-4932 Secure gradebook calls with CSRF Guard

* Secure the following gradebook calls in particular:

- Release marks

- Any change in marks

- Export

* Add taglibs.jsp to gradebook project

Options
    • -0
    • +7
    /lams_central/conf/security/Owasp.CsrfGuard.properties
    • -1
    • +0
    /lams_gradebook/src/java/org/lamsfoundation/lams/gradebook/web/controller/GradebookController.java
    • -75
    • +55
    /lams_gradebook/src/java/org/lamsfoundation/lams/gradebook/web/controller/GradebookMonitoringController.java
    • -3
    • +2
    /lams_gradebook/web/403.jsp
    • -3
    • +2
    /lams_gradebook/web/404.jsp
    • -0
    • +15
    /lams_gradebook/web/WEB-INF/web.xml
    • -0
    • +8
    /lams_gradebook/web/common/taglibs.jsp
    • -5
    • +2
    /lams_gradebook/web/error.jsp
    • -5
    • +2
    /lams_gradebook/web/errorContent.jsp
    • -5
    • +1
    /lams_gradebook/web/gradebookCourseLearner.jsp
    • -15
    • +10
    /lams_gradebook/web/gradebookCourseMonitor.jsp
    • -40
    • +51
    /lams_gradebook/web/gradebookMonitor.jsp
    • -2
    • +16
    /lams_gradebook/web/includes/javascript/blockexportbutton.js
    • -5
    • +2
    /lams_gradebook/web/msgContent.jsp
    • -1
    • +1
    /lams_tool_preview/src/java/org/lamsfoundation/lams/tool/peerreview/web/controller/AuthoringController.java
5:14 am

Andrey Balan

LDEV-4932 Secure save tool authoring with CSRF Guard

Options
    • -39
    • +64
    /lams_central/conf/security/Owasp.CsrfGuard.properties
    • -1
    • +1
    /lams_tool_assessment/src/java/org/lamsfoundation/lams/tool/assessment/web/controller/AuthoringController.java
    • -1
    • +2
    /lams_tool_assessment/web/pages/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_chat/src/java/org/lamsfoundation/lams/tool/chat/web/controller/AuthoringController.java
    • -2
    • +2
    /lams_tool_chat/web/pages/authoring/authoring.jsp
    • -10
    • +1
    /lams_tool_daco/src/java/org/lamsfoundation/lams/tool/daco/web/controller/AuthoringController.java
    • -2
    • +2
    /lams_tool_daco/web/pages/authoring/authoring.jsp
    • -11
    • +1
    /lams_tool_doku/src/java/org/lamsfoundation/lams/tool/dokumaran/web/controller/AuthoringController.java
    • -1
    • +2
    /lams_tool_doku/web/pages/authoring/authoring.jsp
    • -1
    • +2
    /lams_tool_images/web/pages/authoring/authoring.jsp
    • -10
    • +5
    /lams_tool_imscc/src/java/org/lamsfoundation/lams/tool/commonCartridge/web/controller/AuthoringController.java
    • -1
    • +2
    /lams_tool_imscc/web/pages/authoring/authoring.jsp
    • -1
    • +1
    /lams_tool_lamc/src/java/org/lamsfoundation/lams/tool/mc/web/controller/McController.java
    • -2
    • +2
    /lams_tool_lamc/web/authoring/AuthoringTabsHolder.jsp
    • -1
    • +1
    /lams_tool_laqa/src/java/org/lamsfoundation/lams/tool/qa/web/controller/QaAuthoringController.java
  16. … 28 more files in changeset.
12:34 am

Marcin Cieslak

Merge remote-tracking branch 'origin/develop' into LDEV-4745

Conflicts:

lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/service/IScratchieService.java

lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/service/ScratchieServiceImpl.java

Options
    • -10
    • +10
    /lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/service/IScratchieService.java
    • -11
    • +20
    /lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/service/ScratchieServiceImpl.java
    • -2
    • +10
    /lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/web/controller/LearningWebsocketServer.java
12:28 am

Marcin Cieslak

Merge remote-tracking branch 'origin/master' into develop

Options
12:07 am

Marcin Cieslak

Merge branch 'LDEV-4936'

Options
12:06 am

Marcin Cieslak

LDEV-4936 Fix layout for tool groups in sysadmin

Options
    • -5
    • +0
    /lams_admin/web/css/learningLibraryGroup.scss
    • -5
    • +2
    /lams_admin/web/includes/javascript/learningLibraryGroup.js
    • -0
    • +5
    /lams_admin/web/toolcontent/learningLibraryGroup.jsp
    • -34
    • +14
    /lams_admin/web/toolcontent/toolcontentlist.jsp
Monday 30 Dec 2019
10:44 pm

Ernie Ghiglione

LDEV-4932 Adding CSRF admin

Adding CSRF to delete session management

Options
    • -2
    • +2
    /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/SessionMaintainController.java
    • -4
    • +2
    /lams_admin/web/sessionmaintain.jsp
    • -0
    • +1
    /lams_central/conf/security/Owasp.CsrfGuard.properties
8:30 pm

Ernie Ghiglione

LDEV-4932 Adding CSRF to admin

Adding CSRF token:

- When adding/editing learning outcomes

- Adding/editing and removing themes

Options
    • -1
    • +2
    /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/ThemeManagementController.java
    • -3
    • +3
    /lams_admin/web/themeManagement.jsp
    • -0
    • +3
    /lams_central/conf/security/Owasp.CsrfGuard.properties
    • -2
    • +3
    /lams_central/src/java/org/lamsfoundation/lams/web/outcome/OutcomeController.java
    • -3
    • +4
    /lams_central/web/outcome/outcomeEdit.jsp
Sunday 29 Dec 2019
7:04 pm

Ernie Ghiglione

LDEV-4932 Adding CSRF Admin

Fixing policy management toggle. Adding enable/disable toggle for tool management

Options
    • -1
    • +2
    /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/PolicyManagementController.java
    • -3
    • +3
    /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/ToolContentListController.java
    • -3
    • +3
    /lams_admin/web/policies/policies.jsp
    • -9
    • +8
    /lams_admin/web/toolcontent/toolcontentlist.jsp
    • -0
    • +2
    /lams_central/conf/security/Owasp.CsrfGuard.properties
1:33 am

Ernie Ghiglione

LDEV-4931 Adding CSRF protection for LAMS Admin

Adding:

- Edit configuration

- Editing timezones

- Add/disable/enable/delete signup pages

- Add/disable/enable/delete integrated server

- Add/activate/deactivate policies

Options
    • -3
    • +4
    /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/ExtServerManagementController.java
    • -2
    • +2
    /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/LtiConsumerManagementController.java
    • -1
    • +2
    /lams_admin/src/java/org/lamsfoundation/lams/admin/web/controller/SignupManagementController.java
    • -0
    • +70
    /lams_admin/web/WEB-INF/tlds/security/csrfguard.tld
    • -4
    • +19
    /lams_admin/web/WEB-INF/web.xml
    • -2
    • +2
    /lams_admin/web/config/editconfig.jsp
    • -2
    • +2
    /lams_admin/web/integration/ltiConsumer.jsp
    • -10
    • +4
    /lams_admin/web/integration/ltiConsumerList.jsp
    • -4
    • +5
    /lams_admin/web/integration/serverlist.jsp
    • -3
    • +3
    /lams_admin/web/integration/servermaintain.jsp
    • -2
    • +2
    /lams_admin/web/loginmaintain.jsp
    • -3
    • +3
    /lams_admin/web/policies/editPolicy.jsp
    • -2
    • +2
    /lams_admin/web/signupmanagement/add.jsp
    • -3
    • +4
    /lams_admin/web/signupmanagement/list.jsp
    • -0
    • +1
    /lams_admin/web/taglibs.jsp
    • -2
    • +2
    /lams_admin/web/timezoneManagement.jsp
    • -0
    • +17
    /lams_central/conf/security/Owasp.CsrfGuard.properties
Saturday 28 Dec 2019
11:44 pm

Marcin Cieslak

Merge branch 'LDEV-4935'

Options
11:42 pm

Marcin Cieslak

LDEV-4935 Secure Scribe websockets

User gets checked if he participates in the given activity.

Options
    • -4
    • +11
    /lams_tool_scribe/src/java/org/lamsfoundation/lams/tool/scribe/web/controller/LearningWebsocketServer.java